New feature - URL Allow List Object

Could you add a feature that creates "URL Allow List" objects and "URL Block List" objects. We have several  URL Filtering Security Profiles and try to keep our business partner sites in the "Allow List" but have to manually add them to each profile.

Log Exporting

I am exploring the best method for me to export and create reports based off of log data from a PA-4020, and have a few questions.  Real-time reporting hasn't been determined just yet, but since I can essentially get real-time from the PA GUI I am th

UserID - possible to identify AD computer name

I have firmware version 4.1.1 and use the appropriate User-ID program for this firmware. I undretand how it all works for Active Directory user accounts, but what I want to know is can it be used to scan AD containers that only contain computer names

Problem with Authentication Profile

I had to do some changes to the Allow List of a Authentication Profile based on LDAP (AD) but i'm constantly recieving "ajaxUserIdAgentUserHandler:: Error in retrieving data: Not Found"

I'm sure that this was working previously. Additionaly I've manua

PanAgent AD Groups disappear

Hello all,

We have a strange issue.

Suddenly and without any cause the AD users in our PAN device losses the AD groups that they belong to. This is a huge problem cause the security policies configured by groups does not work.

The strange thing is if w

Pan OS 4.1.2

I see they released version 4.1.2.  Will there be a release for PAN-200 or is the PAN-500 version the same for the PAN-200.

Log Fomrat

Hi all,

is there any way to change the format of Palo Alto's logs?

Dynamic Updates

I noticed under dynamic updates --> URL filtering that it shows version 3777 action upgrade.  The action is set to "download-and-install".  It shows the previous version 3776 as being the currently installed version. 

So what would be causing version

Global Protect Agent as an EAP-TLS Supplicant

Hey All;  For WI-FI Customers that want to perform EAP-TLS authentication is there any way we can use the global protect agent as a supplicant to a Wireless or Wired Access point? maybe taking their local credentials from Windows, then proxy the auth

Speed up Interface

Hi All;

Is there a way to speed up the interface beyond the following:

1) Using Chrome

2) Opening up Tabs separatley

Such as:

1) Disabling checks in the commit from the UI

2) Will clearing logs/data etc to get faster response times